Odd russian text and website on windows log in page - wassup?!

Zeeflyboy · 10 Apr 2020 at 10:43

Hey guys,

I have this (bottom left) show up on my windows log in page, no idea why. I've run defender scans, including offline, and Malwarebytes but no hits for anything nefarious.

Any idea why this is happening? Can't seem to figure it out.... cheers for any ideas.

randal · 10 Apr 2020 at 11:17

Is that a calendar item?

Deleted member 77746 · 10 Apr 2020 at 11:20

It looks like a calendar item to me.

Zeeflyboy · 10 Apr 2020 at 11:36

Cheers - I don’t use calendar on windows... and why do I have Russian calendar items linking to a website I’ve never heard of?

Deleted member 77746 · 10 Apr 2020 at 11:38

Zeeflyboy said:
why do I have Russian calendar items linking to a website I’ve never heard of?

That is a good question, why do you?

Zeeflyboy · 10 Apr 2020 at 11:40

So I looked in calendar (first time I've opened it as I don't use it) and sure enough it's full of never ending Russian appointments.

what the hell...

Zeeflyboy · 10 Apr 2020 at 11:43

So the events were from my google calendar it seems, no idea why or how those events were entered.... how weird.

There are quite a few hits for google calendar Russian spam so I will go an investigate - thanks for putting me on the right path! Looks like gmail adding spam events from emails to the calendar.

Deleted member 77746 · 10 Apr 2020 at 11:49

Maybe you have opened a calendar file and it's automatically propagated your calendar full of stuff.

Zeeflyboy · 10 Apr 2020 at 13:15

I don't believe I did...

Seems like google can pick up spam, automatically adds events from emails with event invites. I've changed some settings that should stop it from happening again

https://www.androidauthority.com/google-calendar-spam-fix-1025008/

hyperseven · 10 Apr 2020 at 16:40

Perhaps you are part of the Treadstone project?